Daily log
Activity
What I'm building, day by day — pulled from the GitHub event stream each night and summarised by Claude.
August 2026
15 active days
Effort
avg 6.4Commits
505Daily Log
Rusty put in substantial work across the Query Farm ecosystem today, with a particular focus on code quality, performance tuning, and protocol refinements.
vgi-rpc-cpp received significant attention with performance optimizations and infrastructure improvements. He tuned Unix socket buffer handling to improve throughput, documenting the benchmarking results that revealed socket buffers were masking performance gains. The codebase got a major quality upgrade: adoption of clang-format with CI enforcement, normalization of line endings with .gitattributes, and compilation with -Wall -Wextra flags followed by fixing the warnings these uncovered. He also replaced the custom cryptography implementation with libsodium, established formatting and warning conventions in CLAUDE.md, and addressed protocol issues including application version enforcement at dispatch boundaries and handling of empty batches with extension-typed columns.
vgi-cpp underwent extensive refinement with 34 commits touching core functionality. The repository was relicensed to the Query Farm Source-Available License and restructured with removal from the duckdb namespace. Major protocol and feature work included conditional request handling, finalization per substream, HTTP 304 responses, composite fixtures supporting multiple catalogs, macros with per-schema object counts, constraints and catalog comments, per-type secrets and struct settings, COPY FROM support, declared ranges with enforcement, and cardinality tracking that influenced planning. He also formatted the tree with clang-format, unified the FunctionInfo core, and achieved a passing test suite of 273 cases with 10,763 assertions.
vgi-rpc-rust received a targeted performance fix for Unix socket buffer sizing, similar to the C++ work.
vgi-rpc-python had socket buffer tuning for the client side and shared memory region cleanup.
cupola saw 14 commits focused on user experience and deployment. New Connect examples for Python and TypeScript, improved editor UI with syntax highlighting and restructured toolbars, settings redesign, self-hosted release image publishing, and dependency updates to use published VGI packages. He also enhanced reports with compositional generation, improved visualizations and maps, added agent-authored reports, and fixed transient data viewer state persistence issues.
haybarn-community-extensions received dependency bumps: the vgi extension updated with OAuth fixes and test improvements, and bitfilters updated with DuckDB 1.5 compatibility fixes and new bloom filter functions.
Beyond his own repositories, Rusty provided community support by replying to issue #3 on a5 regarding polygon coverage functions, and engaged with the DuckDB core project by reviewing PR #24587 on HTTP cache control implementation—demonstrating continued stewardship of open-source standards integration.
VGI-RPC Protocol Implementations
Rusty focused heavily on advancing the VGI-RPC ecosystem across multiple language implementations. In vgi-rpc-cpp, he implemented a shared-memory side channel transport mechanism and brought the port up to version 0.42.3, adding S3 and GCS backend support via vcpkg feature flags. Significant effort went into CI and cross-platform fixes, including Linux build corrections and full MSVC Windows support with conformance test passing.
Across the other language bindings — vgi-rpc-rust, vgi-rpc-go, vgi-rpc-typescript, vgi-rpc-java, and vgi-rpc-python — he synchronized conformance test behavior with the 0.42.3 protocol spec, signaling the unavailable token correctly. The TypeScript and Python implementations also received HTTP error handling improvements, treating resolver outages as transient 503 responses rather than definitive failures. vgi-rpc-typescript saw a release bump to 0.21.3, and vgi-rpc-python released 0.42.3 with the transient error handling baked in.
In vgi-java, he worked on the client layer, decoding declared parameter specs and table info from server responses. A smaller fix in vgi-rust consolidated split protocol-version documentation across crates.
Arrow Ecosystem & Community Work
Rusty opened PR #924 on apache/arrow-nanoarrow to add encoder and decoder support for Message.custom_metadata in the Arrow IPC (Inter-Process Communication) protocol, enabling per-message key/value metadata separate from schema-level metadata.
On apache/arrow-adbc, he opened issue #4695 documenting a PostgreSQL transaction regression in version 1.12.0 where transactions silently fail to start after a read, rendering subsequent rollback() calls a no-op. He also engaged on DuckDB's community extension work, replying to PR #24777 on duckdb/duckdb regarding external extension repositories.
H3 Geospatial Library
Two issues were opened on the H3 JavaScript library (felixpalmer/a5) regarding polygonToCells behavior: one requesting a containment mode for full polygon coverage (issue #125) and another noting that the current compacted output does not geometrically describe the filled region (issue #124). A corresponding port request was filed on felixpalmer/a5-rs (issue #58) to add these containment/compact options to the Rust binding.
Design & UI
In cupola, Rusty adopted Strata Sun branding with a new mark, palette, and typography. He also fixed a UI bug where AI turns could run indefinitely without visible feedback on screen.
Private repository work accounted for 5 commits across 2 repos.
Rusty spent the day consolidating documentation and examples across the vgi (Verifiable Generated Interface) project suite, while also contributing to upstream Apache projects.
In vgi-java, he brought documentation workers directly into the repository, streamlining the example workflow. The parallel effort in vgi-rust involved two key improvements: re-exporting vgi-rpc to eliminate version naming concerns for workers, and refining the launcher's stderr/stdout handling to prevent inheritance and properly release resources after discovery. He also created runnable documentation workers organized by function shape in the Rust implementation.
The vgi-java-introduction-docs repository received updates to build examples against the current SDK rather than the pinned 0.1.0 version, and the examples themselves were migrated into the main vgi-java repo, reducing duplication.
In vgi-go, a bug fix corrected the typed column accessors, which were incorrectly returning 0 for columns they couldn't read.
Rusty also engaged with the broader open-source ecosystem. He opened issue #923 on arrow-nanoarrow requesting support for custom_metadata on RecordBatch messages for IPC, and provided feedback on two existing discussions: a DataFusion issue (#17379) regarding named notation for user-defined function arguments, and an Arrow Nanoarrow issue (#622) about dictionary-encoded types in the IPC writer.
Additionally, private repository work involved 2 commits across infrastructure.
VGI Java client and RPC improvements dominated the day. Over on vgi-java, Rusty shipped two point releases bringing the library to 0.25.1. The work centered on enabling a Java client to drive a VGI worker—a significant capability addition. Key fixes included resolving issues with externalized batches being lost during streaming, addressed through a coordinated bump to vgi-rpc-java 0.21.5. The vgi-rpc-java repo itself saw focused fixes to streaming clients over persistent transports and proper resolution of streamed externalized batches, with three releases across versions 0.21.4 and 0.21.5 to stabilize the feature.
The vgi-go repository received substantial attention with a large merge commit integrating multiple improvements: type validation enhancements that now reject unknown type= names instead of silently defaulting to VARCHAR, auto-registration of aggregate state, and reconciliation of COPY format naming. Documentation examples were also expanded—new tested examples for scalar workers, workers per function shape, catalog workers, and result-cache workers, each with reader-relative build commands and typed metadata constants. Two traps surfacing only at query time in the copy and aggregate subsystems were closed.
Over on vgi-rpc-python, Rusty updated documentation to reflect that the Cedar proxy is now called Rowfence. He also provided community feedback on DuckDB's PR #24587 regarding HTTP cache control implementation, contributing to the broader ecosystem.
Private repository work also continued with 5 commits across 2 repos.
A high-volume day across the VGI RPC ecosystem, with 58 commits spanning 10 repositories. The work focused on two major themes: a brand refresh and a series of bug fixes and feature adjustments across the language-specific RPC client libraries.
Brand Refresh
Rusty rolled out a new transparent master logo across multiple repositories. The vgi-rpc-cpp, vgi-rpc-rust, vgi-rpc-go, vgi-rpc-typescript, vgi-rpc-java, and vgi-rpc-python libraries all received updated brand assets regenerated from the new master. Additionally, both vgi-rpc-cpp and vgi-rpc-website moved from a round seal to a shield mark design. Documentation scripts were updated to fix D401 linting issues and clarify the master asset reference.
VGI RPC TypeScript (vgi-rpc-typescript)
This library received the most focused work with seven releases in quick succession. Key improvements included:
- HTTP compression handling: Fixed an issue where the workerd runtime was compressing responses for clients that never requested compression, making it opt-in instead (0.21.0)
- Landing page refactoring: Moved the VGI landing surface out to
@query-farm/vgias a breaking change (0.20.0), then re-vendored it multiple times as the upstreamcupolalanding page was refined - Path routing fixes: Addressed two subtle bugs where duplicate slashes in request paths caused 404 errors, and where contributed routes weren't seeing the normalized path (0.21.1 and 0.21.2)
- Client bundle guarding: Re-vendored the landing page client bundle with logic to detect and prevent staleness
Cupola Landing Page (cupola)
The landing page underwent structural improvements to better showcase the API catalog:
- Macros are now listed separately from functions instead of being treated as a unified type
- Long function signatures are wrapped for readability, and argument types are now displayed
- The client bundle was rebuilt to properly decode the
X-VGI-Content-Encodingheader
VGI Match Recognize (vgi-matchrecognize)
Added support for Trino's PERMUTE case, which the translator had previously been skipping. Also cleaned up tracking of Trino port scratch files and corrected the changelog to accurately reflect what shipped in versions 0.1.0 and 0.2.0.
VGI Open Meteo (vgi-open-meteo)
This API wrapper received substantial dependency updates and feature work:
- Updated to the latest VGI and VGI-RPC versions as they evolved through the day
- Added cache headers to advertise result caching for both geocoding and elevation endpoints
- Fixed CORS header handling and removed a deployment reference that never materialized
- Properly mounted the landing surface and fixed a body decoding issue that Cupola couldn't handle
- Expanded the README to document the
weather_codesview and the result cache
Private Repositories
Additional work across 3 private repositories (15 commits).
Version Releases
The day included releases across multiple libraries: vgi-rpc-rust 0.21.1, vgi-rpc-typescript 0.19.5, 0.20.0, 0.21.0, 0.21.1, and 0.21.2, vgi-rpc-java 0.21.3, and vgi-rpc-python 0.42.2.
A high-productivity day focused on performance optimization and correctness fixes across the VGI ecosystem, with particular emphasis on the MATCH_RECOGNIZE extension.
vgi-matchrecognize
The bulk of today's work landed in vgi-matchrecognize, where Rusty delivered a major architecture overhaul and subsequent refinements. The spool subsystem was reimplemented to use memory-mapped files instead of SQLite, yielding a 2.7x throughput improvement. Subsequent optimizations mapped spool records to eliminate copying (reducing latency from 16 to 1–3 ns/row), compressed frames at the spool level, and refactored sink file merging by batch index. Concurrent partition matching was added, accelerating 8M-row workloads from 3.7s to 1.0s.
Memory management received heavy attention: sharding was introduced to keep the buffered relation within budget, with a secondary fast path for raw integer partition keys and a new requires_input_batch_index flag to preserve input order. Frame-level compression was made opt-in after it quietly unbound the memory budget.
On the SQL semantics side, critical correctness bugs were fixed: ORDER BY now respects matching order vs. output order, NaN comparisons no longer equate to everything, temporal arithmetic uses i128 to prevent overflow, and prefix NOT now parses correctly relative to comparisons. The matcher's comparator was pinned structurally to prevent state-sharing bugs. Pattern label interning reduced allocation overhead by 1.4–2.1x. Running aggregates are now folded incrementally (1350x win on long matches), and DEFINE/SUBSET/MEASURES now accept MAP or STRUCT as input.
Documentation was thoroughly revised: the README was reorganized, benchmark numbers removed, ADR 001 dropped after an upstream fix, and new architecture diagrams and measured performance numbers added.
vgi-java
A maintenance release (0.24.1) bumped dependencies including slf4j, sqlite-jdbc, gson, junit, and vgirpc. CI was fixed to actually run unit tests.
vgi-rpc-typescript
Release 0.19.4 addressed a Node.js ESM compatibility issue: the module now reaches node:fs synchronously, eliminating the need for a require polyfill.
vgi-go
Added per-catalog attach options and a gated catalog fixture endpoint. Module dependencies were refreshed to latest patch and minor versions, and a Windows portability fix was applied to the example self-kill logic.
vgi-benchmarks
The engine floor was raised to haybarn 1.5.5rc1 to align with VGI protocol 1.3.0.
haybarn-community-extensions
The vgi extension dependency was bumped twice to latest main, picking up batch_index fallback coverage and test infrastructure improvements.
Private Work
15 commits across 3 private repositories.
A focused day of releases and documentation alignment across the VGI ecosystem.
On vgi-lint-check, a release bump to 0.81.0 shipped support for protocol 1.3.0 and VGI905 preconditions, marking progress on protocol compliance.
The TypeScript RPC library (vgi-rpc-typescript) received two rapid releases addressing HTTP handling. Version 0.19.1 fixed an issue where Cloudflare was double-encoding compressed responses, followed by 0.19.2 which guarded the dispatch debug flag behind globalThis to ensure blended and table-in-out functions work correctly on Cloudflare Workers. These fixes resolve interoperability issues with the CDN platform.
Units support in vgi-units was bumped to 0.1.5, aligning with VGI 0.29 / vgi-rpc 0.21 for the 1.3.0 protocol release.
The haybarn community extensions were updated to track the latest vgi main branch, pulling in changes that publish worker-declared global functions into system.main, retire the describe.json contract, and improve handling of required options on attach.
A subtle bug fix in adbc_scanner corrected wrong results when scanning ANALYZE'd tables — the kind of edge case that only surfaces under specific query optimization conditions.
Documentation received overdue attention on vgi-rpc-python. The wire protocol spec had drifted significantly across nine releases, missing three request-metadata keys, lagging on HTTP headers and endpoints, and containing actively misleading claims. PR #39 brings the spec current with the actual implementation. This also includes private work across 4 commits on 2 internal repos.
A major coordination effort across the VGI protocol ecosystem today, with 42 commits spanning eight repositories. The overarching theme: migrating from static describe.json endpoints to a dynamic catalog system that clients read over the protocol itself.
vgi-java reached version 0.23.0, implementing the new landing page behavior that reads the catalog over the protocol rather than relying on describe.json. Rusty also dropped the describe.json producer and added a required option to attach configurations.
vgi-rpc-rust bumped to 0.21.0 with parallel changes: the HTTP server now serves the VGI client bundle directly and no longer exposes describe.json routes. Internal dependency pins were updated to maintain consistency across the ecosystem.
vgi-rust advanced to 0.29.0, with similar landing page refactoring. Notably, the protocol now advertises every unary method's real parameter schema, and wrapped parameter schemas are advertised directly instead of being hidden behind describe.json. The required option was added to attach options, and formatting was standardized with cargo fmt.
cupola received several polish improvements: fixed lossless Arrow type handling and eliminated a terminal-readiness race condition. The landing page now strips trailing slashes from the client base URL and reads the catalog over the protocol. Perspective was upgraded to v5.1.0 with a rebased fork, npm-layout vendoring, and virtual-server coverage.
vgi-rpc-typescript shipped version 0.19.0 and a preceding 0.18.1. The landing surface gained test coverage, the client bundle is now served by HTTP routes (describe.json removed), and the base URL handling was standardized. The package is now installable under npm with a browser-compatible webpack build.
vgi-rpc-java released 0.21.0, echoing the Rust changes: HTTP routes serve the client bundle and describe.json endpoints are gone.
vgi-go completed the rollout at 0.19.0. The protocol layer now declares wrapped parameter schemas on request-wrapped methods, the catalog advertises these schemas, and required was added to attach options. Like its peers, the landing page now serves the JavaScript client instead of producing describe.json.
Beyond the public repositories, Rusty also made 13 commits across four private repositories, indicating additional work on related infrastructure or applications.
Daily Activity Summary for August 9, 2026
Rusty executed a large-scale synchronization cycle across the DuckDB community extensions ecosystem. The haybarn-community-extensions-sync repository recorded the coordination of 41 dispatches, syncing upstream changes at commit 6b41a3c8.
The bulk of the work manifested across haybarn-community-extensions, where he synchronized 40+ extension repositories with their upstream sources. Notable updates included:
- New extensions onboarded:
stac,quackiso,python_udf,motorsport_telemetry,ml,luajit,gdrive, anderpl_tunnelwere all brought into the sync system for the first time - Version bumps:
zarradvanced from v0.1.2 → v0.1.3,pstfrom v0.2.0 → v0.2.0,anofox_statisticspinned to v0.8.1, andpython_udfset to v0.2.1 - Branch/commit synchronizations: Extensions like
zim,urlpattern,snowflake,raster,quackscale,quackformers,quackapi,plinking_duck,pdf,pdal,osmium,mlpack,ldbc_data_gen,laterite_ags4,gpudb,gaggle,fit,eurostat,duckgql,duckdb_opendalfs, andadbc_scannerall received upstream commit updates - Stable tracking:
duck_lineageremained at its current pin despite the sync cycle
The systematic nature of these updates—marked with [skip ci] flags—reflects an automated or highly organized synchronization workflow managing the health and currency of the broader DuckDB community extension ecosystem. Additionally, Rusty made 3 commits on a private repository, though the specifics remain undisclosed.
Rusty focused on several interconnected projects, with particular attention to cloud data handling and worker infrastructure.
Work on vgi-cbor advanced the CBOR serialization layer with two key improvements. The glob source expansion completed the port of cloud.rs, bringing cloud data handling capabilities into the serialization pipeline. Additionally, he refactored MessagePack timestamp handling to properly carry instant values using the reserved timestamp extension type, preserving nanosecond precision — a critical detail for temporal correctness in data interchange.
haybarn-wasm received test infrastructure refinement: the OPFS (Origin Private File System) test suite was scoped to its own describe block, improving test organization and isolation for the browser-based storage implementation.
The bulk of effort landed in cupola, where Rusty shipped two releases while addressing accessibility and error handling. Version 0.4.105 bundled significant improvements including SQL quoting fixes, an auth classifier, consolidated Arrow handling, prompt facts, and a bridge split refactor—all while ensuring the e2e test suite runs green. Version 0.4.106 followed quickly with a branded error page for outdated or missing worker versions, making the user experience clearer when deployments drift. The accessibility work fixed 7 failing e2e tests, restoring full test compliance across the suite.
SQL quoting and Arrow migration work in cupola
Rusty focused on fixing several interconnected issues in cupola. Two commits addressed SQL quoting, catalog field name handling, and completing an Apache Arrow migration. The work involved escaping SQL literals properly, tightening authentication classification logic, and finishing the transition to Arrow-based data handling. These fixes improve both data safety and the robustness of catalog operations.
HTTP error handling across the ecosystem
Work extended to related projects addressing error surface and reporting. In haybarn-community-extensions, a dependency bump pulled in upstream fixes from the main branch, including improvements to how HTTP worker errors are surfaced after the stream header has been written. Over in vgi-rpc-python, he implemented a complementary fix to flag producer errors on their first turn, ensuring errors are caught and reported at the right point in the HTTP request lifecycle.
Private repository work
Additional commits were made across 2 private repositories (4 commits total), continuing parallel development efforts.
Rusty focused on community engagement and support work throughout the day, fielding eleven issue and pull request comments across various projects. Rather than pushing new features, he concentrated on reviewing, providing feedback, and helping others navigate their work—a solid day of stewardship and collaboration.
Behind the scenes, private repository activity shows nine commits distributed across two private codebases, suggesting ongoing maintenance or feature development on projects not yet public.
A heavy day across the VGI ecosystem, focusing on payload handling and protocol updates. Rusty addressed a critical issue: payloads larger than 2 GiB were being corrupted or rejected across multiple language implementations. This required careful fixes to transport layer bounds checking and honest ceiling reporting instead of wrapping errors.
VGI RPC implementations saw coordinated updates to fix the large-payload issue. In vgi-rpc-rust, the fix involved bounding every transport write and removing the illegitimate 256 MiB cap on request bodies—released as v0.20.0. The Go and TypeScript implementations followed suit: vgi-rpc-go and vgi-rpc-typescript received similar transport bounds fixes, with CI adjustments to run large-payload test suites in isolation (preventing the access log from interfering). vgi-rpc-java shipped v0.20.2 with proper error semantics for bodies that exceed 2 GiB, and vgi-rpc-python received multiple releases (0.40.0–0.42.0) addressing httpx → httpx2 migration, clamped reads, and required huge-payload conformance testing.
The Rust ecosystem advanced significantly. vgi-rust released three versions (0.26.0–0.28.0) adopting VGI protocol 1.3.0 with global functions and streaming COPY FROM via CopyFromFunction::read_stream. vgi-cbor matured from 0.2.1 to 0.4.0 with CBOR/MessagePack COPY format support, exact DECIMAL and timestamp handling, s3:// and http(s):// path support via object store, streaming COPY FROM instead of buffering, and improved container path diagnostics. vgi-go adopted VGI protocol 1.3.0 and the latest vgi-rpc-go v0.20.0.
haybarn-wasm saw a release bump to 1.5.5-rc2 with coordinated dependency upgrades (css-loader 7, webpack-cli 7, actions/setup-node v7, wrangler pinning) and CI improvements to decouple shell deployment from npm publishing. The wasm base image tag now derives from the workspace version for consistency. cupola followed with a haybarn-wasm 1.5.5-rc1 dependency bump.
Rusty also managed 11 community reviews and replies on dependabot PRs across haybarn-wasm and vgi-rpc-python, shepherding dependency updates through the pipeline. Private repo activity added 9 commits across 4 repos, continuing parallel work.
A high-velocity day across the vgi-rpc language ports, driving conformance to the 0.36 protocol specification. Rusty systematized a major cross-language update involving token architecture changes, standardized error handling, and access logging infrastructure.
vgi-rpc-python saw the heaviest activity with 19 commits shipping features and refinements. He released versions 0.34.0 through 0.37.0, tracking the specification milestones: token introspection endpoints (off by default), egress accounting and claim redaction in the access log, async log emission, Cross-Origin-Resource-Policy standardization, and conformance test automation. Notable fixes include capturing introspection logs correctly, emitting request_data as a real IPC stream to speed up the request path, and relaxing the conformance validator to accept zero-parameter calls. A security fix bumped the cryptography dependency floor past GHSA-g6cj-pr64-35w5.
vgi-rpc-rust, vgi-rpc-go, vgi-rpc-typescript, and vgi-rpc-java each received parallel updates implementing the 0.36 spec surface. He opened PR #33 on vgi-rpc-typescript, PR #1 on vgi-rpc-java, PR #1 on vgi-rpc-rust, and PR #3 on vgi-rpc-go—each bringing the respective language port to feature parity with the Python reference implementation. The ports now include:
- Call/cursor token split — separating call tokens from state tokens with cursor version bumps (v4→v6 in Rust, v5→v6 in Java, v5 in TypeScript, bounded call-state caches)
- Token payload compression inside sealed envelopes with codec tagging
- Standardized 401 responses with reason codes, cache directives, and JSON envelopes
- Introspection endpoints and access log verification integrated into CI pipelines at DEBUG level across all ports
Rust encountered a build issue fixed by ensuring clean compilation without the HTTP feature. Java required a fix to serialize request_data before the stream drains.
On the open-source front, Rusty provided feedback on apache/arrow-rs PR #10075, discussing the use of Metadata struct instead of HashMap<String, String> for ordered, cheap-to-clone metadata handling.
A productive day spanning multiple repositories, with heavy focus on performance optimization and release work in vgi-rpc-python, alongside UI fixes and community engagement.
cupola received a bug fix to preserve query results when switching between editor tabs, improving the user experience for multi-tab workflows.
vgi-go saw protocol buffer regeneration to align with the 1.3.0 release of vgi-python, which introduced global function support.
vgi-rpc-python absorbed the bulk of today's effort with a substantial performance optimization sprint. Key improvements include:
- HTTP layer: Fixed waitress server defaults for the workload, resolved dispatch function resolution to happen once rather than per-request, and implemented retry logic for requests lost to stale keep-alive connections
- State management: Split stream state into separate call and cursor tokens, encoded flat stream state without Arrow IPC overhead, and reused deserialized stream-pinned state across turns to avoid repeated rebuilds
- Batch handling: Built one-row batches per column and shared a single
IpcWriteOptionsinstance - Cryptography: Switched from PyNaCl to PyCryptodome for state token sealing and added per-platform AEAD backend selection
- Caching: Cached empty batches and shared IPC read options; reverted some over-aggressive serialization caches that proved counterproductive
- Testing: Fixed drain-timer stubs to coexist with pytest-timeout on Windows, and ran the full suite under xdist to expose and fix concurrency issues
Two releases were cut: version 0.32.0 introduced a msgpack state codec replacing the positional codec, while 0.31.0 featured the call/cursor token split, compact state codec, and per-platform AEAD selection.
Two feature PRs were opened: PR #37 replaces the circular seal brand asset throughout the project with a new shield mark design (updating the logo, landing page, error pages, and other assets), and PR #36 standardizes the 401 response format with machine-readable error signals and a proxy-configuration note, replacing ad-hoc HTML pages with structured responses that won't break Arrow clients.
Rusty also engaged with upstream projects: replying on PR #10075 in apache/arrow-rs regarding metadata struct optimization, and on PR #22564 in duckdb/duckdb for the new secret type parameters system view.
Private repository activity included 16 commits across 4 repos.